This notice explains, before we collect data, who the controller is, what information we process, why, with whom we share it, and how to exercise ARCO-POL rights. It covers the Fyntics website, the SaaS platform, and, where relevant, AI assistants.
Last updated: August 13, 2026
1. Controller identity
The controller is Softcorp Consultores, S.A.S. de C.V., operating under the trade name Fyntics, based in San Salvador, El Salvador. Contact and ARCO-POL channel: info@fyntics.com. Website: https://fyntics.com. Platform: https://app.fyntics.com.
The Tax Identification Number (NIT) and full street address will be published here as soon as they are available. Until then you may request them, and the name of the Data Protection Officer, at the same email. The Officer handles ARCO-POL requests under articles 15 to 20 of the LPDP.
2. Scope
This notice covers three distinct contexts:
Marketing site (fyntics.com): contact forms, newsletter, cookies and technical browsing logs.
SaaS platform (app.fyntics.com): user accounts, companies, accounting, finance, payroll, reports and artificial intelligence.
Evaluation desktop app (CONTASV origin): data may remain on the user’s device; if a personal AI key is used, queries go from that device to the model provider.
Fyntics is built for SMEs in El Salvador and Central America. Salvadoran law is the primary framework of this notice. If we process data of people in other LATAM countries, we apply this same standard and any local rules that apply.
3. Personal data we process
We process data of identified or identifiable natural persons. We do not intentionally collect sensitive data (health, biometrics, political opinions, etc.) to provide the service. If a file you upload contains such data, it is processed only as part of that file and for the module’s purpose.
On the website we may collect:
Identity and contact: name, email, company and message from the contact form.
Newsletter: email address, when that feature is active.
Technical data: IP address, browser, language, pages visited and cookie preference (stored on your device).
On the SaaS platform, depending on the modules you use, we may process:
Account: username, email, password (stored as a hash), role and plan.
Company: legal name, NIT, NRC, DUI, business activity, tax regime, address, phone, representatives, accountant, auditor and incorporation or credential documents you upload.
Your business third parties: customers and suppliers (name, NIT, NRC, DUI, contact, credit).
Operations: purchases, sales, inventory, assets, receivables and payables, bank accounts and movements you load (no open banking and no Ministerio de Hacienda portal passwords).
Payroll: DUI, NIT, NSS, NUP/AFP, salary, bank account and ISSS, AFP and income-tax calculations for your employees.
AI and audit: chat history, files or images sent to OCR, security alerts and an action log.
4. Legal basis
Processing is based on article 5 (lawfulness) of the Personal Data Protection Act (Legislative Decree No. 144):
Performance of the contract and pre-contract steps: creating the account, providing the SaaS, support and billing.
Legal obligation: retention of tax information when the law requires it and, once enabled, transmission of electronic tax documents (DTE) to the Ministry of Finance.
Express consent: newsletter, non-essential cookies and marketing purposes. No pre-ticked boxes.
Legitimate interest: security, fraud prevention, audit logs and service improvement, provided your rights do not prevail.
5. Purposes
Purposes necessary for the service (no separate consent if you already contracted or wrote to us for a demo):
Operate the site and platform, authenticate users and isolate data by company (multitenancy).
Keep accounting, finance, inventory, reports and, if applicable, payroll.
Process documents with OCR and AI to help you capture or analyze information you send.
Handle contact, support and operational communications.
Meet Fyntics’ own tax obligations as a provider.
Purposes that do require consent:
Newsletter, promotions and commercial content.
Analytics cookies (Google Analytics 4), only if you accept them in the banner and a measurement ID is configured. The site does not load ads or social-network pixels.
6. Controller and processor
For marketing data and the contracting user’s account, Softcorp Consultores acts as controller.
For data about your customers, suppliers, employees and vouchers, you (the customer company) are the controller. Fyntics acts as processor: we handle that data on your behalf to provide the service. We do not sell databases or use it to offer unrelated services.
7. Processors, recipients and DTE
We may disclose data to:
Anthropic (Claude), for chat, OCR and financial analysis. Texts, relevant history and images or PDFs you attach may be sent.
The site’s transactional email provider (SendGrid) when you submit the contact form.
Hosting, database and file-storage infrastructure and, once enabled, platform email and a payment gateway.
El Salvador’s Ministry of Finance, only when electronic tax document (DTE) transmission is enabled for your account. That disclosure is a legal duty, not marketing consent.
Fyntics does not currently issue or transmit DTE in production, nor store Hacienda portal passwords or certificates. Plans may mention DTE limits as future commercial scope. When that feature goes live we will update this notice and the terms.
8. International transfers
Some processors (for example the AI model provider) may process data outside El Salvador. We only transfer data to recipients that offer protection no lower than the LPDP or equivalent international standards, with processor contracts and security measures. Proving that adequacy is the controller’s burden (arts. 44 and 54 LPDP).
9. Artificial intelligence
The Finn and Tix assistants help capture, explain and analyze financial information. They do not replace an accountant and do not make binding tax decisions without human review. We do not use your tenant data to train public third-party models. The system may log manipulation attempts for security. You have the right not to be subject to solely automated decisions with significant effects.
10. Retention
Account and operational data: while the contract is in force and for any extra time needed for closings, disputes or backups.
Contact and newsletter: until you withdraw consent or request cancellation, unless we must keep the message for security or a claim.
Cookie preference: on your device, typically up to 12 months.
Tax vouchers and books: the period Salvadoran tax law requires (in practice, several years). The right to erasure does not require deleting what the law obliges us to keep.
AI history and audit logs: as needed for security, plan quotas and service improvement, then deleted or anonymized.
11. Security and breach notice
We apply technical and organizational measures: encryption in transit, hashed passwords, company isolation, role control, audit logging and, where the service allows, stronger authentication. If personal data is breached we will notify ACE, the Attorney General’s Office and affected individuals within 72 hours of becoming aware, under article 25 LPDP.
12. ARCO-POL rights
You may exercise Access, Rectification, Cancellation, Opposition, Portability, Erasure and Restriction, free of charge, by writing to info@fyntics.com with subject “ARCO-POL”. The request must include your name, a notification channel, identity document (and your representative’s, if any) and a description of the right you are exercising.
The Officer will respond within twenty business days, extendable by another twenty for justified cause. Consent withdrawal is resolved within five business days. If you disagree, you may go to the State Cybersecurity Agency (ACE).
13. Withdrawing consent
You may withdraw consent expressly, simply and free of charge, without retroactive effect on processing already done. Withdrawal does not stop processing that has another basis (contract or legal obligation).
14. Minors
Fyntics is a B2B service. It is not directed at anyone under 18. If we detect a minor’s account, we will close it.
15. Cookies
Cookie use is described in the Cookie policy. Essential cookies may load so the site works. Non-essential cookies, if we enable them, will require consent in the banner.
16. Changes to this notice
We will publish the update date on this page. Material changes will be communicated on the site, by email or inside the platform. Later use of the service, when a new consent is not required, means you were informed through this channel.
17. Supervisory authority
The supervisory body is the Agencia de Ciberseguridad del Estado (ACE). You can also write to us first at info@fyntics.com so we can handle your request directly.